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1 The click modular router 

d& Eddie Kohler, Robert Morris, Benjie Chen, John Jannotti, M. Frans Kaashoek 

August 2000 ACM Transactions on Computer Systems (TOCS), volume is issue 3 

Publisher: ACM Press 


Full text available: fH I pdf(376.31 KB) 


Additional Information: full citation , abstract , references , citings , index 

terms 


Clicks is a new software architecture for building flexible and configurable routers. A Click 
router is assembled from packet processing modules called elements. Individual elements 
implement simple router functions like packet classification, queuing, scheduling, and 
interfacing with network devices. A router configurable is a directed graph with elements 
at the vertices; packets flow along the edges of the graph. Several features make 
individual elements more powerful and ... 


Keywords: component systems, routers, software router performance 


2 Software engineering for security: a roadmap 
% PremkumarT. Devanbu, Stuart Stubblebine 

May 2000 Proceedings of the Conference on The Future of Software Engineering 

Publisher: ACM Press 

Full text available: ffi) pdff1.71 MB) Additional Information: full citation , references , ci tings , index terms 


Keywords: copy protection, security, software engineering, water-marking 


Analysis of a local-area wireless network 
Diane Tang, Mary Baker 

August 2000 Proceedings of the 6th annual international conference on Mobile 

computing and networking 
Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 


Full text available: TO pdf(1.36 MB) 

terms 

To understand better how users take advantage of wireless networks, we examine a 
twelve-week trace of a building-wide local-area wireless network. We analyze the network 
for overall user behavior (when and how intensively people use the network and how 
much they move around), overall network traffic and load characteristics (observed 
throughput and symmetry of incoming and outgoing traffic), and traffic characteristics 
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4 A framework for implementing role-based access control using CORBA security 
|k service 

^ Konstantin Beznosov, Yi Deng 

October 1999 Proceedings of the fourth ACM workshop on Role-based access control 

Publisher: ACM Press 

Full text available: f| 3 pdff1.21 MB) Additional Information: full citation , references , citings , index terms 


Fast and scalable wireless handoffs in supports of mobile Internet audio 
Ramon Caceres, Venkata N. Padmanabhan 

December 1998 Mobile Networks and Applications, volume 3 issue 4 
Publisher: Kluwer Academic Publishers 

Full text available* * P | pdf(187 08 KB) Additional Information: full citation , abstract , references , citings , index 
^ ! terms 

Future internetworks will include large numbers of portable devices moving among small 
wireless cells. We propose a hierarchical mobility management scheme for such networks. 
Our scheme exploits locality in user mobility to restrict handoff processing to the vicinity 
of a mobile node. It thus reduces handoff latency and the load on the internetwork. Our 
design is based on the Internet Protocol (IP) and is compatible with the Mobile IP 
standard. We also present experimental results for the I ... 

The 19th Century Meets the 21st 
Paul Murphy 

September 1999 Linux Journal 

Publisher: Specialized Systems Consultants, Inc. 

Full text available: W\ html(17.79 KB) Additional Information: full citation , abstract , index terms 

Mr. Murphy describes how he set up DSL service for the old Brooklyn apartment where he 
lives 

Router plugins: a software architecture for next-generation routers 

Dan Decasper, Zubin Dittia, Guru Parulkar, Bernhard Plattner 

February 2000 IEEE/ ACM Transactions on Networking (TON), volume 8 issue l 

Publisher: IEEE Press 

Full text available: pdf(530.34 KB) Additional Information: full citation , references , citings , index terms 


Keywords: communication system routing, communication system security, internet, 
modular computer systems 


8 Mobile networking in the Internet 
Charles E. Perkins 

December 1998 Mobile Networks and Applications, Volume 3 issue 4 
Publisher: Kluwer Academic Publishers 

Full text available 1 *p i pdf(166 90 KB) Additional Information: full citation , abstract , references , citings , index 

! terms 

Computers capable of attaching to the Internet from many places are likely to grow in 
popularity until they dominate the population of the Internet. Consequently, protocol 
research has shifted into high gear to develop appropriate network protocols for 
supporting mobility. This introductory article attempts to outline some of the many 
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promising and interesting research directions. The papers in this special issue indicate the 
diversity of viewpoints within the research community, and it is ... 

Linux DSP shell 

Michael Stridden, Bob Cummings, Brandon Bonner 
September 1999 Crossroads, Volume 6 issue i 

Publisher: ACM Press 

Full text available: W\ html(30.23 KB) Additional Information: full citation , index terms 


10 Session summaries from the 17th symposium on operating systems principle 

& (SOSP'99) 

^ Jay Lepreau, Eric Eide 

April 2000 ACM SIGOPS Operating Systems Review, volume 34 issue 2 

Publisher: ACM Press 

Full text available: ^g| pdf(3.15 MB) Additional Information: full citation , index terms 


11 Router plugins: a software architecture for next generation routers 
j& Dan Decasper, Zubin Dittia, Guru Parulkar, Bernhard Plattner 

^ October 1998 ACM SIGCOMM Computer Communication Review , Proceedings of the 

ACM SIGCOMM '98 conference on Applications, technologies, 
architectures, and protocols for computer communication SIGCOMM 

'98, Volume 28 Issue 4 

Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 


Full text available: 1S3 pdff1.82 MB) 

L - J ^ terms 

Present day routers typically employ monolithic operating systems which are not easily 
upgradable and extensible. With the rapid rate of protocol development it is becoming 
increasingly important to dynamically upgrade router software in an incremental fashion. 
We have designed and implemented a high performance, modular, extended integrated 
services router software architecture in the NetBSD operating system kernel. This 
architecture allows code modules, called plugins, to be dynamically ... 

Keywords: high performance integrated services routing, modular router architecture, 
router plugins 


12 Security architecture-based system design 

# Edward A. Schneider 
September 1999 Proceedings of the 1999 workshop on New security paradigms 

Publisher: ACM Press 

Full text available: *jg3 pdf(677.88 KB) Additional Information: full citation , references , index terms 


Keywords: information domain, information system design, security architecture, 
security policy 


13 Separating key management from file system security 

.gjv David Mazieres, Michael Kaminsky, M. Frans Kaashoek, Emmett Witchel 

^ December 1999 ACM SIGOPS Operating Systems Review , Proceedings of the 

seventeenth ACM symposium on Operating systems principles SOSP 

'99, Volume 33 Issue 5 
Publisher: ACM Press 
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Full text available: ^pdfM.77 MB) full citation , abstract , references , citings , index 

terms 

No secure network file system has ever grown to span the Internet. Existing systems all 
lack adequate key management for security at a global scale. Given the diversity of the 
Internet, any particular mechanism a file system employs to manage keys will fail to 
support many types of use. We propose separating key management from file system 
security, letting the world share a single global file system no matter how individuals 
manage keys. We present SFS, a secure file system that avoids internal ... 

14 A cost-effective, high-bandwidth storage architecture 

# Garth A. Gibson, David F. Nagle, Khalil Amiri, Jeff Butler, Fay W. Chang, Howard Gobioff, 
Charles Hardin, Erik Riedel, David Rochberg, Jim Zelenka 

October 1998 ACM SIGOPS Operating Systems Review , ACM SIGPLAN Notices , 

Proceedings of the eighth international conference on Architectural 
support for programming languages and operating systems ASPLOS- 

VIII, Volume 32 , 33 Issue 5 , 11 

Publisher: ACM Press 

Full text available- fs ?|pdf(1.67 MB) Additional Information: full citation , abstract , references , citings , index 

terms 

This paper describes the Network-Attached Secure Disk (NASD) storage architecture, 
prototype implementations oj NASD drives, array management for our architecture, and 
three, filesystems built on our prototype. NASD provides scalable storage bandwidth 
without the cost of servers used primarily, for transferring data from peripheral networks 
(e.g. SCSI) to client networks (e.g. ethernet). Increasing datuset sizes, new attachment 
technologies, the convergence of peripheral and interprocessor switc ... 

15 Applying policy management to reduce support costs for remote and mobile 

computing 
Russell J. Sharer 

July 1998 International Journal of Network Management, volume 8 issue 4 
Publisher: John Wiley & Sons, Inc. 

Full text available: ^ pdf(68.99 KB) Additional Information: full citation , abstract , index terms 

Remote access to networks has become a standard part of corporate networks worldwide, 
and one that is growing rapidly. How are network managers to respond to this growth 
without a corresponding increase in resources? © 1998 by John Wiley & Sons, Ltd. 

16 Nark: receiver-based multicast non-repudiation and key management 
Bob Briscoe, Ian Fairman 

November 1999 Proceedings of the 1st ACM conference on Electronic commerce 
Publisher: ACM Press 

Full text available: ffil pdf(168.86 KB) Additional Information: full citation , references , citings , index terms 


v$3 


Keywords: Internet, audit trail, key management, multicast, non-repudiation, smartcard, 
watermark 


17 Flexible control of downloaded executable content 
^ Trent Jaeger, Atul Prakash, Jochen Liedtke, Nayeem Islam 

May 1999 ACM Transactions on Information and System Security (TISSEC), volume 2 

Issue 2 

Publisher: ACM Press 

Full text available- W[ pdf(297 79 KB) Additional Information: full citation , abstract , references , citings , index 

! terms , review 

We present a security architecture that enables system and application a ccess control 
requirements to be enforced on applications composed from downloaded executable 
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content. Downloaded executable content consists of messages downloaded from remote 
hosts that contain executables that run, upon receipt, on the downloading principal's 
machine. Unless restricted, this content can perform malicious actions, including 
accessing its downloading principal's private data and sending messages on th ... 

Keywords: access control models, authentication, autorization machanisms, collaborative 
systems, role-based access control 


18 Evaluation and testing of internet firewalls 
Khalid Al-Tawil, Ibrahim A. Al-Kaltham 

May 1999 International Journal of Network Management, volume 9 issue 3 
Publisher: John Wiley & Sons, Inc. 

Full text available: ^ pdf( 587.62 KB) Additional Information: full citation , abstract , references , index terms 

In this article we propose a testing methodology for evaluating Internet firewalls and 
apply it to compare two popular firewalls. Copyright © 1999 John Wiley & Sons, Ltd. 


19 Techniques for trusted software engineering 

Premkumar T. Devanbu, Philip W-L Fong, Stuart G. Stubblebine 

April 1998 Proceedings of the 20th international conference on Software engineering 
Publisher: IEEE Computer Society 

Full text available: ^ (f| 

[|j pqf(1.21 MB) tj* 1 Additional Information: full citation , references , citings , index terms 

Publisher Site 


20 Design and implementation of a distributed virtual machine for networked computers 

Emin G ^n Sirer, Robert Grimm, Arthur J. Gregory, Brian N. Bershad 
December 1999 ACM SIGOPS Operating Systems Review , Proceedings of the 

seventeenth ACM symposium on Operating systems principles SOSP 

'99, Volume 33 Issue 5 

Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 


Full text available: W pdf(1.62 MB) 

^ terms 

This paper describes the motivation, architecture and performance of a distributed virtual 
machine (DVM) for networked computers. DVMs rely on a distributed service architecture 
to meet the manageability, security and uniformity requirements of large, heterogeneous 
clusters of networked computers. In a DVM, system services, such as verification, security 
enforcement, compilation and optimization, are factored out of clients and located on 
powerful network servers. This partitioning of system fun ... 
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